CWE-908 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-908/ Sun, 26 Feb 2023 09:10:26 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png CWE-908 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-908/ 32 32 CVE-2008-4197 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-4197/ Sun, 26 Feb 2023 09:10:26 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-4197/ Opera before 9.52 on Windows, Linux, FreeBSD, and Solaris, when processing custom shortcut and menu commands, can produce argument strings that contain uninitialized memory, which might allow user-assisted remote attackers to execute arbitrary code or conduct other attacks via vectors related to activation of a shortcut.

The post CVE-2008-4197 appeared first on CVE Vulnerability.

]]> Opera before 9.52 on Windows, Linux, FreeBSD, and Solaris, when processing custom shortcut and menu commands, can produce argument strings that contain uninitialized memory, which might allow user-assisted remote attackers to execute arbitrary code or conduct other attacks via vectors related to activation of a shortcut.

The post CVE-2008-4197 appeared first on CVE Vulnerability.

]]> CVE-2008-3688 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-3688/ Sun, 26 Feb 2023 09:10:08 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-3688/ sockethandler.cpp in HTTP Antivirus Proxy (HAVP) 0.88 allows remote attackers to cause a denial of service (hang) by connecting to a non-responsive server, which triggers an infinite loop due to an uninitialized variable.

The post CVE-2008-3688 appeared first on CVE Vulnerability.

]]> sockethandler.cpp in HTTP Antivirus Proxy (HAVP) 0.88 allows remote attackers to cause a denial of service (hang) by connecting to a non-responsive server, which triggers an infinite loop due to an uninitialized variable.

The post CVE-2008-3688 appeared first on CVE Vulnerability.

]]> CVE-2008-3597 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-3597/ Sun, 26 Feb 2023 09:10:05 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-3597/ Skulltag before 0.97d2-RC6 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) by sending a “command 29” packet when the player is not in the game.

The post CVE-2008-3597 appeared first on CVE Vulnerability.

]]> Skulltag before 0.97d2-RC6 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) by sending a “command 29” packet when the player is not in the game.

The post CVE-2008-3597 appeared first on CVE Vulnerability.

]]> CVE-2008-3475 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-3475/ Sun, 26 Feb 2023 09:10:01 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-3475/ Microsoft Internet Explorer 6 does not properly handle errors related to using the componentFromPoint method on xml objects that have been (1) incorrectly initialized or (2) deleted, which allows remote attackers to execute arbitrary code via a crafted HTML document, aka “Uninitialized Memory Corruption Vulnerability.”

The post CVE-2008-3475 appeared first on CVE Vulnerability.

]]> Microsoft Internet Explorer 6 does not properly handle errors related to using the componentFromPoint method on xml objects that have been (1) incorrectly initialized or (2) deleted, which allows remote attackers to execute arbitrary code via a crafted HTML document, aka “Uninitialized Memory Corruption Vulnerability.”

The post CVE-2008-3475 appeared first on CVE Vulnerability.

]]> CVE-2008-2934 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-2934/ Sun, 26 Feb 2023 09:09:46 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-2934/ Mozilla Firefox 3 before 3.0.1 on Mac OS X allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted GIF file that triggers a free of an uninitialized pointer.

The post CVE-2008-2934 appeared first on CVE Vulnerability.

]]> Mozilla Firefox 3 before 3.0.1 on Mac OS X allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted GIF file that triggers a free of an uninitialized pointer.

The post CVE-2008-2934 appeared first on CVE Vulnerability.

]]> CVE-2008-0062 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-0062/ Sun, 26 Feb 2023 09:08:22 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-0062/ KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted messages that trigger a NULL pointer dereference or double-free.

The post CVE-2008-0062 appeared first on CVE Vulnerability.

]]> KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted messages that trigger a NULL pointer dereference or double-free.

The post CVE-2008-0062 appeared first on CVE Vulnerability.

]]> CVE-2008-0063 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-0063/ Sun, 26 Feb 2023 09:08:22 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-0063/ The Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) does not properly clear the unused portion of a buffer when generating an error message, which might allow remote attackers to obtain sensitive information, aka “Uninitialized stack values.”

The post CVE-2008-0063 appeared first on CVE Vulnerability.

]]> The Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) does not properly clear the unused portion of a buffer when generating an error message, which might allow remote attackers to obtain sensitive information, aka “Uninitialized stack values.”

The post CVE-2008-0063 appeared first on CVE Vulnerability.

]]> CVE-2008-0081 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-0081/ Sun, 26 Feb 2023 09:08:22 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-0081/ Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via crafted macros, aka “Macro Validation Vulnerability,” a different vulnerability than CVE-2007-3490.

The post CVE-2008-0081 appeared first on CVE Vulnerability.

]]> Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via crafted macros, aka “Macro Validation Vulnerability,” a different vulnerability than CVE-2007-3490.

The post CVE-2008-0081 appeared first on CVE Vulnerability.

]]> CVE-2007-1751 https://cvevulnerability.com/cve_vulnerabilities/cve-2007-1751/ Sun, 26 Feb 2023 09:06:00 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2007-1751/ Microsoft Internet Explorer 5.01, 6, and 7 allows remote attackers to execute arbitrary code by causing Internet Explorer to access an uninitialized or deleted object, related to prototype variables and table cells, aka “Uninitialized Memory Corruption Vulnerability.”

The post CVE-2007-1751 appeared first on CVE Vulnerability.

]]> Microsoft Internet Explorer 5.01, 6, and 7 allows remote attackers to execute arbitrary code by causing Internet Explorer to access an uninitialized or deleted object, related to prototype variables and table cells, aka “Uninitialized Memory Corruption Vulnerability.”

The post CVE-2007-1751 appeared first on CVE Vulnerability.

]]> CVE-2018-9557 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-9557/ Sun, 26 Feb 2023 06:51:50 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-9557/ In really_install_package of install.cpp, there is a possible free of arbitrary memory due to uninitialized data. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2. Android ID: A-35385357.

The post CVE-2018-9557 appeared first on CVE Vulnerability.

]]> In really_install_package of install.cpp, there is a possible free of arbitrary memory due to uninitialized data. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2. Android ID: A-35385357.

The post CVE-2018-9557 appeared first on CVE Vulnerability.

]]>